{"id":"CLSA-2026-1778787692","summary":"Fix CVE(s): CVE-2026-7258, CVE-2026-7262, CVE-2026-7568","details":"   * SECURITY UPDATE: NULL pointer dereference in SOAP apache:Map decoder\n     - debian/patches/CVE-2026-7262.patch: fix wrong variable checked in\n       to_zval_map() NULL check, changing if (!xmlKey) to if (!xmlValue)\n     - CVE-2026-7262\n   * SECURITY UPDATE: Signed integer overflow in metaphone() char array offset\n     - debian/patches/CVE-2026-7568.patch: widen w_idx in metaphone() and\n       how_far/idx in Lookahead() from int to size_t in\n       ext/standard/metaphone.c to prevent signed overflow on inputs\n       exceeding 2^31 bytes\n     - CVE-2026-7568\n   * SECURITY UPDATE: Denial of service via signed char passed to ctype functions\n     - debian/patches/CVE-2026-7258.patch: consistently cast chars to\n       unsigned char before all ctype.h calls (isxdigit, isdigit, isalpha,\n       isalnum, isspace, tolower, toupper) across 54 files including\n       ext/standard/url.c (php_url_decode, php_raw_url_decode) and\n       ext/standard/formatted_print.c, Zend/zend_virtual_cwd.c, and others\n     - CVE-2026-7258","modified":"2026-06-04T09:45:11.778997527Z","published":"2026-05-14T19:41:39Z","upstream":["CVE-2026-7258","CVE-2026-7262","CVE-2026-7568"],"references":[{"type":"ADVISORY","url":"https://errata.tuxcare.com/els_os/ubuntu20.04els/CLSA-2026-1778787692.html"}],"affected":[{"package":{"name":"libapache2-mod-php7.4","ecosystem":"TuxCare:Ubuntu:20.04","purl":"pkg:deb/tuxcare/libapache2-mod-php7.4?distro=ubuntu-20.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.4.3-4ubuntu2.29+tuxcare.els4"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1778787692.json"}},{"package":{"name":"libphp7.4-embed","ecosystem":"TuxCare:Ubuntu:20.04","purl":"pkg:deb/tuxcare/libphp7.4-embed?distro=ubuntu-20.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.4.3-4ubuntu2.29+tuxcare.els4"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1778787692.json"}},{"package":{"name":"php7.4","ecosystem":"TuxCare:Ubuntu:20.04","purl":"pkg:deb/tuxcare/php7.4?distro=ubuntu-20.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.4.3-4ubuntu2.29+tuxcare.els4"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1778787692.json"}},{"package":{"name":"php7.4-bcmath","ecosystem":"TuxCare:Ubuntu:20.04","purl":"pkg:deb/tuxcare/php7.4-bcmath?distro=ubuntu-20.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.4.3-4ubuntu2.29+tuxcare.els4"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1778787692.json"}},{"package":{"name":"php7.4-bz2","ecosystem":"TuxCare:Ubuntu:20.04","purl":"pkg:deb/tuxcare/php7.4-bz2?distro=ubuntu-20.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.4.3-4ubuntu2.29+tuxcare.els4"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1778787692.json"}},{"package":{"name":"php7.4-cgi","ecosystem":"TuxCare:Ubuntu:20.04","purl":"pkg:deb/tuxcare/php7.4-cgi?distro=ubuntu-20.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.4.3-4ubuntu2.29+tuxcare.els4"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1778787692.json"}},{"package":{"name":"php7.4-cli","ecosystem":"TuxCare:Ubuntu:20.04","purl":"pkg:deb/tuxcare/php7.4-cli?distro=ubuntu-20.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.4.3-4ubuntu2.29+tuxcare.els4"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1778787692.json"}},{"package":{"name":"php7.4-common","ecosystem":"TuxCare:Ubuntu:20.04","purl":"pkg:deb/tuxcare/php7.4-common?distro=ubuntu-20.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.4.3-4ubuntu2.29+tuxcare.els4"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1778787692.json"}},{"package":{"name":"php7.4-curl","ecosystem":"TuxCare:Ubuntu:20.04","purl":"pkg:deb/tuxcare/php7.4-curl?distro=ubuntu-20.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.4.3-4ubuntu2.29+tuxcare.els4"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1778787692.json"}},{"package":{"name":"php7.4-dba","ecosystem":"TuxCare:Ubuntu:20.04","purl":"pkg:deb/tuxcare/php7.4-dba?distro=ubuntu-20.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.4.3-4ubuntu2.29+tuxcare.els4"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1778787692.json"}},{"package":{"name":"php7.4-dev","ecosystem":"TuxCare:Ubuntu:20.04","purl":"pkg:deb/tuxcare/php7.4-dev?distro=ubuntu-20.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.4.3-4ubuntu2.29+tuxcare.els4"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1778787692.json"}},{"package":{"name":"php7.4-enchant","ecosystem":"TuxCare:Ubuntu:20.04","purl":"pkg:deb/tuxcare/php7.4-enchant?distro=ubuntu-20.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.4.3-4ubuntu2.29+tuxcare.els4"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1778787692.json"}},{"package":{"name":"php7.4-fpm","ecosystem":"TuxCare:Ubuntu:20.04","purl":"pkg:deb/tuxcare/php7.4-fpm?distro=ubuntu-20.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.4.3-4ubuntu2.29+tuxcare.els4"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1778787692.json"}},{"package":{"name":"php7.4-gd","ecosystem":"TuxCare:Ubuntu:20.04","purl":"pkg:deb/tuxcare/php7.4-gd?distro=ubuntu-20.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.4.3-4ubuntu2.29+tuxcare.els4"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1778787692.json"}},{"package":{"name":"php7.4-gmp","ecosystem":"TuxCare:Ubuntu:20.04","purl":"pkg:deb/tuxcare/php7.4-gmp?distro=ubuntu-20.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.4.3-4ubuntu2.29+tuxcare.els4"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1778787692.json"}},{"package":{"name":"php7.4-imap","ecosystem":"TuxCare:Ubuntu:20.04","purl":"pkg:deb/tuxcare/php7.4-imap?distro=ubuntu-20.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.4.3-4ubuntu2.29+tuxcare.els4"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1778787692.json"}},{"package":{"name":"php7.4-interbase","ecosystem":"TuxCare:Ubuntu:20.04","purl":"pkg:deb/tuxcare/php7.4-interbase?distro=ubuntu-20.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.4.3-4ubuntu2.29+tuxcare.els4"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1778787692.json"}},{"package":{"name":"php7.4-intl","ecosystem":"TuxCare:Ubuntu:20.04","purl":"pkg:deb/tuxcare/php7.4-intl?distro=ubuntu-20.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.4.3-4ubuntu2.29+tuxcare.els4"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1778787692.json"}},{"package":{"name":"php7.4-json","ecosystem":"TuxCare:Ubuntu:20.04","purl":"pkg:deb/tuxcare/php7.4-json?distro=ubuntu-20.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.4.3-4ubuntu2.29+tuxcare.els4"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1778787692.json"}},{"package":{"name":"php7.4-ldap","ecosystem":"TuxCare:Ubuntu:20.04","purl":"pkg:deb/tuxcare/php7.4-ldap?distro=ubuntu-20.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.4.3-4ubuntu2.29+tuxcare.els4"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1778787692.json"}},{"package":{"name":"php7.4-mbstring","ecosystem":"TuxCare:Ubuntu:20.04","purl":"pkg:deb/tuxcare/php7.4-mbstring?distro=ubuntu-20.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.4.3-4ubuntu2.29+tuxcare.els4"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1778787692.json"}},{"package":{"name":"php7.4-mysql","ecosystem":"TuxCare:Ubuntu:20.04","purl":"pkg:deb/tuxcare/php7.4-mysql?distro=ubuntu-20.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.4.3-4ubuntu2.29+tuxcare.els4"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1778787692.json"}},{"package":{"name":"php7.4-odbc","ecosystem":"TuxCare:Ubuntu:20.04","purl":"pkg:deb/tuxcare/php7.4-odbc?distro=ubuntu-20.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.4.3-4ubuntu2.29+tuxcare.els4"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1778787692.json"}},{"package":{"name":"php7.4-opcache","ecosystem":"TuxCare:Ubuntu:20.04","purl":"pkg:deb/tuxcare/php7.4-opcache?distro=ubuntu-20.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.4.3-4ubuntu2.29+tuxcare.els4"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1778787692.json"}},{"package":{"name":"php7.4-pgsql","ecosystem":"TuxCare:Ubuntu:20.04","purl":"pkg:deb/tuxcare/php7.4-pgsql?distro=ubuntu-20.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.4.3-4ubuntu2.29+tuxcare.els4"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1778787692.json"}},{"package":{"name":"php7.4-phpdbg","ecosystem":"TuxCare:Ubuntu:20.04","purl":"pkg:deb/tuxcare/php7.4-phpdbg?distro=ubuntu-20.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.4.3-4ubuntu2.29+tuxcare.els4"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1778787692.json"}},{"package":{"name":"php7.4-pspell","ecosystem":"TuxCare:Ubuntu:20.04","purl":"pkg:deb/tuxcare/php7.4-pspell?distro=ubuntu-20.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.4.3-4ubuntu2.29+tuxcare.els4"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1778787692.json"}},{"package":{"name":"php7.4-readline","ecosystem":"TuxCare:Ubuntu:20.04","purl":"pkg:deb/tuxcare/php7.4-readline?distro=ubuntu-20.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.4.3-4ubuntu2.29+tuxcare.els4"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1778787692.json"}},{"package":{"name":"php7.4-snmp","ecosystem":"TuxCare:Ubuntu:20.04","purl":"pkg:deb/tuxcare/php7.4-snmp?distro=ubuntu-20.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.4.3-4ubuntu2.29+tuxcare.els4"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1778787692.json"}},{"package":{"name":"php7.4-soap","ecosystem":"TuxCare:Ubuntu:20.04","purl":"pkg:deb/tuxcare/php7.4-soap?distro=ubuntu-20.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.4.3-4ubuntu2.29+tuxcare.els4"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1778787692.json"}},{"package":{"name":"php7.4-sqlite3","ecosystem":"TuxCare:Ubuntu:20.04","purl":"pkg:deb/tuxcare/php7.4-sqlite3?distro=ubuntu-20.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.4.3-4ubuntu2.29+tuxcare.els4"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1778787692.json"}},{"package":{"name":"php7.4-sybase","ecosystem":"TuxCare:Ubuntu:20.04","purl":"pkg:deb/tuxcare/php7.4-sybase?distro=ubuntu-20.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.4.3-4ubuntu2.29+tuxcare.els4"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1778787692.json"}},{"package":{"name":"php7.4-tidy","ecosystem":"TuxCare:Ubuntu:20.04","purl":"pkg:deb/tuxcare/php7.4-tidy?distro=ubuntu-20.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.4.3-4ubuntu2.29+tuxcare.els4"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1778787692.json"}},{"package":{"name":"php7.4-xml","ecosystem":"TuxCare:Ubuntu:20.04","purl":"pkg:deb/tuxcare/php7.4-xml?distro=ubuntu-20.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.4.3-4ubuntu2.29+tuxcare.els4"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1778787692.json"}},{"package":{"name":"php7.4-xmlrpc","ecosystem":"TuxCare:Ubuntu:20.04","purl":"pkg:deb/tuxcare/php7.4-xmlrpc?distro=ubuntu-20.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.4.3-4ubuntu2.29+tuxcare.els4"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1778787692.json"}},{"package":{"name":"php7.4-xsl","ecosystem":"TuxCare:Ubuntu:20.04","purl":"pkg:deb/tuxcare/php7.4-xsl?distro=ubuntu-20.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.4.3-4ubuntu2.29+tuxcare.els4"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1778787692.json"}},{"package":{"name":"php7.4-zip","ecosystem":"TuxCare:Ubuntu:20.04","purl":"pkg:deb/tuxcare/php7.4-zip?distro=ubuntu-20.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.4.3-4ubuntu2.29+tuxcare.els4"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1778787692.json"}}],"schema_version":"1.7.5"}